+ Post New Thread
Results 1 to 7 of 7
Windows Server 2008 R2 Thread, Bulk Change Of Share Permissions in Technical; Hi this may of been asked before but i have read many post and still am unable to do this. ...
  1. #1

    Join Date
    Apr 2012
    Location
    Preston
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Bulk Change Of Share Permissions

    Hi this may of been asked before but i have read many post and still am unable to do this.

    We have moved all are users personal folders. I managed to use a tool by wisesoft to set the security permissions on all the folders so they are ok. I also found a script that shared all the folders with the username as the share name. the only remaining problem i have is i need to set the share permissions on all folders to Domain users with full control and the moment is just everyone with read. is there away i can automate this as we have a lot of folders and it would take a long time to do this.

    any help would be much appreciated

    file server: windows 2008R2

  2. #2

    Join Date
    Mar 2010
    Location
    shadowx@AllEvil:/
    Posts
    222
    Thank Post
    12
    Thanked 28 Times in 25 Posts
    Rep Power
    14
    Google "Cacls" it's a command line utility build into windows (I think it comes built in anyhoo...) we recently migrated from a full Novell/Netware system to a full windows 2008 system and use Cacls and some (admittedly rather good) batch file writing to take the blank folders for home directories and shares and apply user and group permissions to them. Print yourself a log using ">>" in the batch file and you can can skim through it afterwards to check for any nasty folders that didnt take the permissions correctly. It should do what you want

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,683
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438

  4. Thanks to plexer from:

    Gaz (27th April 2012)

  5. #4
    Gaz
    Gaz is offline

    Join Date
    Feb 2011
    Location
    Preston
    Posts
    931
    Thank Post
    167
    Thanked 80 Times in 69 Posts
    Rep Power
    22
    Quote Originally Posted by plexer View Post
    That looks like a very handy program to have! Have you used it?

    In my opinion in this day and age I don't think we should still be doing everything via scripts.

  6. #5

    Join Date
    Mar 2010
    Location
    shadowx@AllEvil:/
    Posts
    222
    Thank Post
    12
    Thanked 28 Times in 25 Posts
    Rep Power
    14
    Quote Originally Posted by Gaz View Post
    That looks like a very handy program to have! Have you used it?

    In my opinion in this day and age I don't think we should still be doing everything via scripts.
    I disagree, being a linux user I love scripts and command lines, they are much more flexible than GUIs, more verbose and easier to get an exact action, rather than a more general one which you usually get from a GUI, though if you mess up with a script then you *really* mess up

    Not to mention microsoft hasnt bothered making GUIs for half the stuff they do, sharepoint server still makes massive use of a terminal as does their licensing stuff.

  7. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,683
    Thank Post
    755
    Thanked 1,715 Times in 1,526 Posts
    Rep Power
    438
    Quote Originally Posted by Gaz View Post
    That looks like a very handy program to have! Have you used it?

    In my opinion in this day and age I don't think we should still be doing everything via scripts.
    I have used it allthough not entriely in anger at the moment.

    After the trial expires I think it's about £10 to buy.

    Ben

  8. #7

    Join Date
    Nov 2011
    Posts
    56
    Thank Post
    1
    Thanked 9 Times in 7 Posts
    Rep Power
    23
    Here's a helpful link:
    iCacls - Modify Access Control List

    Our solution isn't the prettiest, but I had to stop inheritance on each folder or I ran into problems. You can see what all the switches mean above... I didn't really expect it to use our AD groups, but it did and I was pleasantly surprised.

    We granted permissions this way:

    Code:
    :: Setting NTFS permissions.
    
    icacls "D:\Applications"                                   /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(RX) 1111Teachers:(RX) 1111Students:(RX) 
    icacls "D:\Applications\Admin Applications"                /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(RX)
    icacls "D:\Applications\Admin Applications\Admin_Apps"     /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(M)
    icacls "D:\Applications\Admin Applications\CCSMSS"         /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(M)
    icacls "D:\Applications\Admin Applications\Sims Routines"  /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(M) 
    icacls "D:\Applications\Admin Applications\XONEPRGS"       /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(M)
    icacls "D:\Applications\Student Applications"              /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(RX) 1111Teachers:(OI)(CI)(RX) 1111Students:(OI)(CI)(RX)
    icacls "D:\Applications\Teacher Applications"              /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Teachers:(OI)(CI)(RX) 1111Admins:(OI)(CI)(RX) 
    icacls "D:\Home Directories"                               /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(RX) 1111Teachers:(RX) 
    icacls "D:\Home Directories\Admins"                        /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(RX)
    icacls "D:\Home Directories\Teachers"                      /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Teachers:(RX) 
    icacls "D:\Home Directories\Students"                      /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Students:(RX) 1111Admins:(OI)(CI)(M) 1111Teachers:(OI)(CI)(M)
    icacls "D:\User Shares"                                    /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(RX) 1111Teachers:(RX) 1111Students:(RX)
    icacls "D:\User Shares\Admin Share"                        /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(M)
    icacls "D:\User Shares\Common Share"                       /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Students:(OI)(CI)(RX) 1111Admins:(OI)(CI)(M) 1111Teachers:(OI)(CI)(M)
    icacls "D:\User Shares\Teacher Share"                      /inheritance:r /grant Administrators:(OI)(CI)(F) "Domain Admins":(OI)(CI)(F) 9200ServerMaintenance:(OI)(CI)(F) 1111Admins:(OI)(CI)(M) 1111Teachers:(OI)(CI)(M)



SHARE:
+ Post New Thread

Similar Threads

  1. Export list of shares and permissions?
    By cookie_monster in forum Windows Server 2008
    Replies: 4
    Last Post: 13th July 2010, 09:16 AM
  2. Bulk Modify Share Permissions
    By mitchell1981 in forum Windows
    Replies: 4
    Last Post: 11th July 2007, 01:33 PM
  3. Non-tech staff setting share permissions
    By ITWombat in forum How do you do....it?
    Replies: 26
    Last Post: 18th July 2006, 11:23 AM
  4. Command line tool for share permissions
    By NetworkGeezer in forum Windows
    Replies: 8
    Last Post: 19th June 2006, 07:32 PM
  5. Replies: 2
    Last Post: 12th January 2006, 10:32 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •